Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to have unspecified impact and attack vectors, which trigger a buffer overflow. NOTE: this identifier has been SPLIT due to different affected versions; use CVE-2014-2669 for the hstore vector.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql84Upgrade postgresql84-libsUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql84-pythonUpgrade postgresql84-tclUpgrade postgresql84-serverUpgrade postgresql-libsUpgrade postgresql84-contribUpgrade postgresql-develUpgrade postgresql-plUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql84-pltclUpgrade postgresql84-develUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql84-docsUpgrade postgresql-pythonUpgrade postgresql84-plpythonUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql-tclUpgrade postgresql84-test | Dec 1, 2016 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade postgresql84Upgrade postgresql-docsUpgrade postgresql84-libsUpgrade postgresql-plperlUpgrade postgresql84-plpythonUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql84-contribUpgrade postgresql84-pythonUpgrade postgresql-plpythonUpgrade postgresql84-testUpgrade postgresql84-pltclUpgrade postgresql84-docsUpgrade postgresql-develUpgrade postgresql84-tclUpgrade postgresql84-develUpgrade postgresql-contribUpgrade postgresql84-server | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql91-contribUpgrade postgresql96-develUpgrade postgresql94-develUpgrade postgresql91Upgrade postgresql94-docsUpgrade postgresql10-contribUpgrade postgresql93-develUpgrade postgresql96-docsUpgrade postgresql91-docsUpgrade postgresql91-serverUpgrade postgresql10-docsUpgrade postgresql96-contribUpgrade postgresql93Upgrade postgresql94-contribUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql10-pltclUpgrade postgresql94-serverUpgrade postgresql93-contribUpgrade libpq5Upgrade postgresql10-serverUpgrade libecpg6Upgrade postgresql10-plpythonUpgrade postgresql91-develUpgrade postgresql10Upgrade postgresql93-docsUpgrade postgresql96Upgrade postgresql93-serverUpgrade postgresql96-serverUpgrade postgresql94Upgrade postgresql10-plperl | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-9.1 | Nov 8, 2024 | Mar 31, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub